9 matches found
CVE-2026-54320 Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted and declined by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and...
8.4CVSS0.00352EPSS
SaveExploits0References1
20